#sh0kc

1 messages · Page 1 of 1 (latest)

tight masonBOT
snow thistle
#

hello! What do you need help with?

kind copper
#

so basically for some reason I get this 400 error from my webhook and to be honest i'm new on this stuff so basically i have a brief understanding of what is happening.

snow thistle
#

This is a good read for 400 errors : https://support.stripe.com/questions/webhooks-what-to-do-when-the-http-status-code-starts-with-a-four-(4xx)-or-five-(5xx) and how to resolve them. I think as a start, you should verify that you're using the correct webhook secret to verify the signature. Sometimes folks forget to change the webhook secret when they migrate from test to production

Webhooks: what to do when the HTTP status code starts with a four (...

Find help and support for Stripe. Our support site provides answers on all types of situations, including account information, charges and refunds, and subscriptions information. Get your questions answered and find international support for Stripe.

kind copper
#

By the way as you can see in the screenshot I have a CSRF_exempt decorator should it stay in production?

snow thistle
#

i don't know why you're including that and that's your own integration so you would need to decide on your own requirements whether it should stay in production

kind copper
#

hey , in production the webhook should look something like this right? (just an Example) 'we_1OBnNaFMVbz4I5yVMElS9DeX'

snow thistle
#

you're referring to the webhook endpoint id? The format is the same in both test and production, but yes

kind copper
#

in test it was something like ' whsec_ ...' but right now it begins with 'we_1O ..' i've basically replaced the test one with the actual one and am curious if this could be the error case

snow thistle
#

ah, so whsec is the webhook secret

#

we_ is the webhook endpoint id

#

you can try resending a recent event via the Dashboard and see if that works now

kind copper
#

wait , so I need whsec still right?

snow thistle
#

whsec is the webhook secret key and yes you do need it to verify the signature

kind copper
#

alright so for what do i need the webhook id?

snow thistle
#

nothing really, unless you're managing multiple webhooks via the API

#

each webhook endpoint has it's own unique ID to identify it

kind copper
#

oohhh okay I think I get it

kind copper
#

how do i get the endpoint secret when i have registered my webhook on stripe

snow thistle
#

it's in the Dashboard

#

click into the webhook and there should be a Signing secret where you can reveal it

kind copper
#

can you please give me a url? thanks

snow thistle